Search History Transcript 



Page 1 of 2 



WEST Search History 



Hide Items ; Restore I Clear : Cancel 



DATE: Thursday, August 17, 2006 



Hide? ^ Query 

DB=PGPB,USPT,USOC,EPAB,JPAB,DWPIJDBD; PLUR=YES; OP=OR 



Hit 
Count 



r 


L35 


computer associates think.asn. 


2011927 


r 


L34 


aderet.in. and fabian.in. 


2 


r 


L33 


elgressy.in. and doron.in. 


15 


r 


L32 


L31 andL4 


5 


r 


L31 


709/225.ccls. 


2423 


r 


L30 


L27 and L4 


8 


r 


L29 


L28 and L4 


2 


r 


L28 


711/148.ccls. 


478 


r 


L27 


711/147.ccls. 


1120 


r 


L26 


(deny$3) near (thread) near (internet) 


0 


r 


L25 


(deny$3) near (thread) near (internet) near (behavior) 


0 


i — 




(deny$3) near (thread) near (internet) near (behavior) near (secure) near 


U 


(resource) 


r 


L23 


L22 and (deny$3 or restrict$3 or prohibit$3) 


11 


r 


L22 


L21 and "internet" 


22 


r 


L21 


L20 and "thread" 


26 


r 


L20 


713/188.ccls. 


318 


r 


L19 


LI 8 and "secure resource" 


0 


r 


L18 


L17and "internet" 


155 


r 


L17 


LI 6 and "thread" 


193 


r 


L16 


709/220.ccls. 


2285 


r 


L15 


L 14 and "internet" 


62 


r 


L14 


L13 and "thread" 


81 


r 


L13 


■726/22.ccls. 


642 


r 


L12 


L8 and @pd<19981015 


0 


r 


Lll 


L8@pd<19981015 


25363944 


r 


L10 


L8 and (secure) 


6 


r 


L9 


L8 and (secure) 


6 


r 


L8 


L7 and (internet) 


53 


r 


L7 


L6 and L4 


196 



http://westbrs:9000^ir^cgi-bin/srchhist.pl?state=41r057.46.1&f=tocl&userid=cfields 



8/17/06 



Search History Transcript Page 2 of 2 

r L6 (thread) near (application) 2430 

r L5 (thread) near (application) near (internet) 1 

r L4 (deny$3 or deni$2 or prohibit$3 or prevent$3 or restrict$3) near (thread) 7468 

r L3 (prohibit$3) near (thread) near (application) 0 

r L2 (prohibit$3) near (thread) near (Internet) 0 

F LI (den$3) near (thread) near (application) 1 

END OF SEARCH HISTORY 



http://westbrs:9000/bin/cgi-bin/srchhist.pl?state=41r057.46J&fNocl&useri 



8/17/06 



application, internet, secure resource, restrict "multithreaded" - Google Search 



Page 1 of 2 



Sign in 



— Web Images Video New! News Maps more » 



i, internet, secure resource, restrict '! f^Search^ 



Advanced Search 
Preferences 



Web Results 1 - 10 of about 63,800 for a pplication , internet , secure resource , restrict " multithreaded ". (0.4 



Comparison J2EE .NET | Define DotNet Framework | Application ... 
Ensure Application Security with IBM Rational and SPI Dynamics ... Developing 
Multithreaded Applications: A Platform Consistent Approach ... 

www.developers.net/al _content/Focus/.NET - 56k - C ached - Similar pages 

Visual Basic 6 Download VB.NET Training 

NET Training: Add multithreading to your VB.NET applications. ... Visual Basic 6 does 
have support for building multithreaded EXEs, DLLs, and OCXs. ... 
www.developers.net/intelshowcase/view/81 - 32k - Aug 15, 2006 - Cached - Similar pages 
[ More results from www.developers.net ] 

Free internet privacy downloads 

1st Security Center is a security utility that allows you to restrict access to Windows 
important resources. This utility helps you to keep your computer in ... 
www.freedownloadscenter.com/Search/internet_privacy_s5.html - 45k - 
Cached - Similar pages 

Dr. Dobb's | Voice Biometrics & A p plication Security | October ... 
But any Internet-capable application can add VoiceXML. ... discusses issues related to 
multithreaded programming, multi-core processors, and how Intel is ... 

www.ddj.com/184405193 - 58k - Cached - Similar pages 

Dr. Dobb's | The Media Grid j September 29, 2005 

In the same way that the Web simplifies Internet development and provides a ... Download 
and try a free product from Cenzic, the #1 application security ... 

www.ddj.com/184406310 - 56k - Cached - SimHar.pag.es 

Remote User Authentication in Libraries 

Catalogue of internet resources on authentication from BUBL Link ... Using Proxy Servers 
To Restrict, Log, And Accelerate Internet Access By Tim Orbaker, ... 
Iibrary,smc.edu/rpa.htm - 75k - Cached - Similar pages 

Macintosh Security Site -> Mac OS X Firewalk - Firewall ... 
Timbuktu OS X Preview Security Advisory + Fix ... Can restrict network access to specific 
applications ... Multithreaded for optimal performance ... 
www.securemac.com/macosxfirewalk.php - 65k - Cached - Similar pages 

Building Secure Assemblies (.NET Framework Security) 

Writing secure resource access code including file I/O, registry, ... If you develop 

multithreaded assemblies, consider the following recommendations: ... 

msdn. microsoft.com/library/en-us/dnnetsec/html/THCMCh07. asp?frame=true - 95k - 

Cached - Similar pages 

[ppt] Slide 1 

File Format: Microsoft Powerpoint - View as HTML 

node that requests and uses resources from other nodes ... Restrict CGI scripts to one 
subdirectory ... Figure 10-9: Establishing Internet security ... 

faculty.maxwell.syr.edu/jpgant/P724_clientserver.ppt - Si mjlar_ pages 



http://www.googlexom/search?hl=en&as_^ 8/17/06 



application, internet, secure resource, restrict "multithreaded" - Google Search 



Page 2 of 2 



SANS Institute - The Top 20 Most Critical Internet Security ... 

More information at Xentinel Digital Security; Related Resources ... Eliminate sample 
applications. Restrict permissions and the availability of binaries ... 
www. sans. org/top20/2004/?portal= - 319k - Cached - Similar pages 

Try your search again on Google Book Search 



Goooooooooogie ► 

Result Page: 1 2345678910 Next 



See all your photos right in your Sidebar. 
Free! Download Google Desktop . 



Google 



2:; Photos < > <3C ^ 




^DJI 11439.44 +4? 



«« 57°F Mostly Ciouc « ~ 



%Q^# il:22 AM 

.. .. . .... u ^m^^^^^mdkM 



[application, internet, secure resourd j Search 



Search within results | Language Tools | Search Tips | Dissatisfied? Help us improve 



Google Home - Advertising Programs - Business Solutions - About Google 

©2006 Google 



http://www.googlexom/search?hl=en 8/17/06 



IEEE Xplore# Search Result 



Page 1 of 4 



Xplore 

, ' act TACC *% 4 



RELEASE 2.1 



□ Search Results 



Home | Login | Logout [ Access Information | Alerts | 
Welcome United States Patent and Trademark Office 

BROWSE SEARCH IEEE XPLORE GUIDE 

fN^e-msil 



Results for "( ( denying access, thread, application, secure resource<in> metadata ) <and> ( internet 
Your search matched 59437 of 1392165 documents. 

A maximum of 100 results are displayed, 25 to a page, sorted by Relevance in Descending order. 



» Search Options 
View Session History 
New Search 



» Other Resources 

(Available For Purchase) 

Top Book Results 

Virtual Worlds on the Internet 
by Vince, J.; Earnshaw, R.; 
Paperback, Edition: 1 

Telecommunications Network 
Mana g ement 

by Aidarous, S.; Plevyak, T.; 
Hardcover, Edition: 1 

Understanding Digital 
Transmission and Recordin g 
by Lebow, I.; 
Paperback, Edition: 1 

Fuzzy S ystems Desi g n Principles 
by Berkan, R. C; Trubatch, S. L; 
Hardcover, Edition: 1 

Open Process Frameworks 
by Marca, D. A.; 
Paperback, Edition: 1 

View All 16 Result(s) 



» Key 
IEEE JNL 



IEEE Journal or 
Magazine 



IEE JNL IEE Journal or Magazine 

IEEE CNF IEEE Conference 
Proceeding 



IEE Conference 
Proceeding 



IEE CNF 
IEEE STD IEEE Standard 



Modify Search 



( ( denying access, thread, application, secure resource<in>metadata ) <and> ( interr Search 



r Check to search only within this results set 

Display Format: (• Citation C Citation & Abstract 



j | view selected items] Select All Deselect All 



View: 1-25 [ 26-5 



r 



r 



r 



1. RPC-V: Toward Fault-Tolerant RPC for Internet Connected Desktop Grids 
Nodes 

Djilali, S.; Herault, T.; Lodygensky, 0.; Morlier, T.; Fedak, G.; Cappello, F.; 
Su percomputing, 2004. Proceedings of the ACM/IEEE SC2004 Conference 
2004 Page(s):39 - 39 

Digital Object Identifier 10.1 109/SC. 2004. 51 



AbstractPlus | Full Text: PDF(240 KB) 
Rig hts and Permissions 



IEEE CNF 



A secure PLAN 

Hicks, M.; Keromytis, A.D.; Smith, J.M.; 

S ystems. Man and Cybernetics, Part C, IEEE Transactions on 

Volume 33, Issue 3, Aug. 2003 Page(s):413 - 426 

Digital Object Identifier 10.1 109/TSMCC.2003.81 7347 

AbstractPlus | References | Full Text: PDF(458 KB) IEEE JNL 
Rig hts and Permissions 

Dynamic argument embedding: preserving state on the World Wide Web 

Iyengar, A.; 

Internet Computing. IEEE 

Volume 1, Issue 2, March-April 1997 Page(s):50 - 56 
Digital Object Identifier 10.1 109/4236.601098 



AbstractPlus | References | Full Text: PDF (180 KB) 
Rights and Permissions 



IEEE JNL 



4. Evaluation of SIP signaling usability in networked operations 

Kurth, C; Prinz, J.; Kampichler, W.; 

Aerospace. 2005 IEEE Conference 

5-12 March 2005 Page(s):1806 - 1815 

Digital Object Identifier 10.1 109/AERO.2005. 1559473 

AbstractPlus | Full Text: PDF(408 KB) IEEE CNF 
Rig hts and Permissions 



5. Security control for COTS components 

Qun Zhong; Edwards, N.; 
Computer 

Volume 31, Issue 6, June 1998 Page(s):67 - 73 
Digital Object Identifier 10.1109/2.683010 



http://ieeexplore.ieee.org/search/searchresult.jsp?query l=denying+access%2C+thread%2C+a... 8/17/06 



IEEE Xplore# Search Result Page 2 of 4 



AbstractPlus | References | Full Text: PDF(148 KB) IEEE JNL 
Rights and Permissions 

r~ 6. A functional framework for Web-based information visualization systems 
Bender, M.; Klein, R.; Disch, A.; Ebert, A.; 
Visualization and Com puter Gra phics, IEEE Transactions on 
Volume 6, Issue 1, Jan.-March 2000 Page(s):8 - 23 
Digital Object Identifier 10.1109/2945.841118 

AbstractPlus | References | Full Text: PDF(3388 KB) IEEE JNL 
Rights and Permissions 

|"~ 7. JM: A Jini Framework for Global Computing 

Juhasz, Z.; Andics, A.; Pota, S.; 

Cluster Computing and the Grid. 2002. 2nd IEEE/ACM International Symposiui 

21 -24 May 2002 Page(s):395 - 395 

Digital Object Identifier 10.1109/CCGRID.2002.1017167 

AbstractPlus | Full Text: PDF(160 KB) IEEE CNF 
Rig hts and Permissions 

\~ 8. Migrating sockets-end system support for networking with quality of ser\ 

Yau, D.K.Y.; Lam, S.S.; 
Networking, IEEE/ACM Transactions on 
Volume 6, Issue 6, Dec. 1998 Page(s):700 - 716 
Digital Object Identifier 10,1109/90.748083 

AbstractPlus | References | Full Text: PDF(368 KB) IEEE JNL 
Rights and Permissions 

f— 9. A secure PLAN (extended version) 

Hicks, M.; Keromytis, A.D.; Smith, J.M.; 

DARPA Active NEtworks Conference and Exposition. 2002. Proceedings 

29-30 May 2002 Page(s):224 - 237 

Digital Object Identifier 10.1 109/DANCE.2002. 1003496 

. AbstractPlus | Full Text: PDF(288 KB) IEEE CNF 
Rights and Permissions 

|"~ i 10. Protocol scrubbing: network security through transparent flow modificat 

~ Watson, D.; Smart, M.; Malan, G.R.; Jahanian, F.; 

Networking, IEEE/ACM Transactions on 
Volume 12, Issue 2, April 2004 Page(s):261 - 273 
Digital Object Identifier 10.1109/TNET.2003.822645 

AbstractPlus | References | Full Text: PDF(320 KB) IEEE JNL 
Rights and Permissions 

["- 11. Toward assessing subjective quality of service of conversational mobile 
applications delivered over the internet: a methodology study 

Dugenie, P.; Munro, AT.; Barton, M.H.; 
Multimedia. IEEE Transactions on 
Volume 4, Issue 1 , March 2002 Page(s):59 - 67 
Digital Object Identifier 10.1 109/6046.985554 

AbstractPlus | References | Full Text: PDF(1003 KB) IEEE JNL 
Rights and Permissions 

[— 12. Adaptable Web interfaces for networked robots 

Fernandez-Madrigal, J.A.; Cruz-Martin, E.; Cruz-Martin, A.; Gonzalez, J.; Galir 
Intelligent Robots and Systems. 2005. (IROS 2005). 2005 IEEE/RSJ Internatic 
on 

2-6 Aug. 2005 Page(s):3441 - 3446 

Digital Object Identifier 10.1 109/IROS.2005. 1545297 



http://ieeexplore.ieee.org/search/searchresult.jsp?query l=denying+access%2C+thread%2C+a... 8/17/06 



IEEE Xplore# Search Result Page 3 of 4 



AbstractPlus | Full Text: PDF(456 KB) IEEE CNF 
Rig hts and Permissions 

r~~ 13. Web objects: towards a Web based model of distributed computing 

Roe, P.; 

Parallel and Distributed Processing Symposium. 2003, Proceedings. Internatic 

22-26 April 2003 Page(s):5 pp. 

Digital Object Identifier 10.1109/IPDPS.2003.1213441 

AbstractPlus | Full Text: PDF(523 KB) IEEE CNF 
Rights and Permissions 

p 14. Web-based robotic control system with flexible framework 

Dongyao Wang; Xudong Ma; Xianzhong Dai; 

Robotics and Automation. 2004. Proceedings. ICRA '04. 2004 IEEE Internatiot 
Volume 4, Apr 26-May 1 , 2004 Page(s):3351 - 3356 Vol.4 
Digital Object Identifier 10.1 109/ROBOT.2004. 1308771 

AbstractPlus | Full Text: PDF(564 KB) IEEE CNF 
Rights and Permissions 

f~ 15. A simulation study of the proactive server roaming for mitigating denial < 
attacks 

Sanetachatanaruk, C; Khattab, S.M.; Znati, T.; Melhem, R.; Mosse, D.; 
Simulation Symposium. 2003. 36th Annual 
30 March-2 April 2003 Page(s):7 - 14 

AbstractPlus | Full Text: PDF(379 KB) IEEE CNF 
Ri ghts and Permissions 

[~~ 16. Exploiting reality with multicast groups 

Macedonia, M.R.; Zyda, M.J.; Pratt, D.R.; Brutzman, D.P.; Barham, P.; 
Computer Graphics and Applications. IEEE 
Volume 15, Issue 5, Sept. 1995 Page(s):38 - 45 
Digital Object Identifier 10.1 109/38.403826 

AbstractPlus | References | Full Text: PDF(888 KB) IEEE JNL 
Rights and Permissions 

|~~ 17. Implementation of web database for ECG 

Paracha, M.A.; Mohammad, S.N.; Macfarlane, P.W.; Jenkins, J.M.; 

Computers in Cardiology, 2003 

21-24 Sept. 2003 Page(s):271 - 274 

Digital Object Identifier 10.1 109/CIC.2003.1291 143 

AbstractPlus | Full Text: PDF(1443 KB) IEEE CNF 
Rights and Permissions 

|~ 18. Throttling viruses: restricting propagation to defeat malicious mobile co< 

Williamson, M.M.; 

Computer Security Applications Conference, 2002. Proceedings. 18th Annual 

9-13 Dec. 2002 Page(s):61 - 68 

Digital Object Identifier 10.1 109/CSAC.2002. 1176279 

AbstractPlus | Full Text: PDF(300 KB) IEEE CNF 
Rights and Permissions 

[— 19. Information hiding-a survey 

Petitcolas, F.A.P.; Anderson, R.J.; Kuhn, M.G.; 
Proceedings of the IEEE 

Volume 87, Issue 7, July 1999 Page(s):1062 - 1078 
Digital Object Identifier 10.1109/5.771065 

AbstractPlus | References | Full Text: PDF(496 KB) IEEE JNL 
Rights and Permissions 



http://ieeexplore.ieee.org/search/searchresult.jsp?query l=denying+access%2C+thread%2C+a... 8/17/06 



IEEE Xplore# Search Result 



Page 4 of 4 



20. Protecting BGP routes to top-level DNS servers 

Lan Wang; Xiaoliang Zhao; Dan Pei; Bush, R.; Massey, D.; Lixia Zhang; 
Parallel and Distributed Systems. IEEE Transactions on 
Volume 14, Issue 9, Sept 2003 Page(s):851 - 860 
Digital Object Identifier 10.1 109/TPDS.2003. 1233708 

AbstractPlus | References | Full Text: PDF(1637 KB) IEEE JNL 
Rights and Permissions 



[™ 21. Protecting BGP routes to top level DNS servers 

Lan Wang; Xiaoliang Zhao; Dan Pei; Bush, R.; Massey, D.; Mankin, A.; Wu, S. 
Distributed Computing Systems. 2003. Proceedings. 23rd International Confer 
19-22 May 2003 Page(s):322 - 331 
Digital Object Identifier 10.1 109/ICDCS.2003.1203481 

AbstractPlus | Full Text: PDF(343 KB) IEEE CNF 
Rights and Permissions 



[~~ 22. Extracting Java library subsets for deployment on embedded systems 

Rayside, D.; Kontogiannis, K.; 

Software Maintenance and Reenqineerinq. 1999. Proceedings of the Third Eut 
Conference on 

3-5 March 1999 Page(s):102 - 110 

Digital Object Identifier 10.1 109/CSMR. 1999.756687 

AbstractPlus | Full Text: PDF(96 KB) IEEE CNF 
Rig hts and Permissions 



23. Evaluation of worm containment algorithms and their effect on legitimate 

Abdelhafez, M.; Riley, G.F.; 

Information Assurance. 2005. Proceedings. Third IEEE International Worksho f 

23-24 March 2005 Page(s):33 - 42 

Digital Object Identifier 10.1 109/IWIA.2005.8 

AbstractPlus | Full Text: PDF(192 KB) IEEE CNF 
Rights and Permissions 



24. Synmon Architecture for Source-based SYN-flooding Defense on Networ 

BoonPing Lim; Uddin, Md.S.; 

Communications. 2005 Asia-Pacific Conference on 

03-05 Oct. 2005 Page(s):995 - 999 

AbstractPlus | Full Text: PDF(368 KB) IEEE CNF 
Rights and Permissions 



p 25. Providing QoS guarantees to unicast and multicast flows in multistage p; 

Francini, A.; Chiussi, F.M.; 

Selected Areas in Communications. IEEE Journal on 
Volume 20, Issue 8, Oct. 2002 Page(s): 1589 - 1601 
Digital Object Identifier 10.1 109/JSAC.2002.803993 

AbstractPlus | References | Full Text: PDF(329 KB) IEEE JNL 
Rights and Permissions 



View: 1-25 | 26-5 



Help Contact Us Privacy & : 

^ © Copyright 2006 IEEE - 



q Inspec® 



http://ieeexplore.ieee.org/search/searchresult.jsp?query l=denying+access%2C+thread%2C+a... 8/17/06 



Results (page 1): +thread, +application 5 +secured +resource, ^denying +access, +restrict s ... Page 1 of 7 



e PORTAL 



USPTO 



Subscribe (Full Service) Register (Limited Service, Free) Log in 

Search: <• The ACM Digital Library C The Guide 
l+thread, +application, +secured +resource / +denying +acces: 



SEARCH 



P 



Feedback Report a problem Satisfaction 
survey 



Terms used 

thread application secured resource denying access restrict internet 



Found 44 of 184,245 



Sort results 
by 

Display 
results 



relevance 



"3 



! Save results to a Binder 



, , Id Search Ti ps 

[expanded form C 0 pen results in a new 



Try an Advanced Search 

Try this search in The ACM Guide 



window 



Results 1 - 20 of 44 



Result page: 12 3 next 



Relevance scale □□Hi 



1 Improving the granularity of access control for Windows 2000 

Michael M. Swift, Anne Hopkins, Peter Brundrett, Cliff Van Dyke, Praerit Garg, Shannon 
^ Chan, Mario Goertzel, Gregory Jensenworth 

November 2002 ACM Transactions on Information and System Security (TISSEC), 

Volume 5 Issue 4 
Publisher: ACM Press 
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Full text available: ^|pdf( 447.78 KB ) 



This article presents the mechanisms in Windows 2000 that enable fine-grained and 
centrally managed access control for both operating system components and applications. 
These features were added during the transition from Windows NT 4.0 to support the 
Active Directory, a new feature in Windows 2000, and to protect computers connected to 
the Internet. While the access control mechanisms in Windows NT are suitable for file 
systems and applications with simple requirements, they fall short of the ... 

Keywords: Access control lists, Microsoft Windows 2000, Windows NT, active directory 



2 QbjectGlobe: Ubiquitous query processing on the Internet 
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August 2001 The VLDB Journal — The International Journal on Very Large Data 

Bases, Volume 10 Issue 1 
Publisher: Springer-Verlag New York, Inc. 

Full text available: ^£| pdf(251.44 KB) Additional Information: full citation , abstract , citings , index terms 

We present the design of ObjectGlobe, a distributed and open query processor for 
Internet data sources. Today, data is published on the Internet via Web servers which 
have, if at all, very localized query processing capabilities. The goal of the ObjectGlobe 
project is to establish an open marketplace in which data and query processing 
capabilities can be distributed and used by any kind of Internet application. Furthermore, 
ObjectGlobe integrates cycle providers (i.e., machi ... 

Keywords: Cycle-, function- and data provider, Distributed query processing, Open 
systems, Privacy, Quality of service, Query optimization, Security 
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Michael M. Swift, Peter Brundrett, Cliff Van Dyke, Praerit Garg, Anne Hopkins, Shannon 
Chan, Mario Goertzel, Gregory Jensenworth 

May 2001 Proceedings of the sixth ACM symposium on Access control models and 
technologies 

Publisher: ACM Press 

. . . , « jr/ncn 0-7 i/nv Additional Information: full citation , abstract , references , citing s, index 

Full text available: TaJ Pdf(259. 87 KB ) — — 3 

^ '* terms 

This paper presents the access control mechanisms in Windows 2000 that enable fine- 
grained protection and centralized management. These mechanisms were added during 
the transition from Windows NT 4.0 to support the Active Directory, a new feature in 
Windows 2000. We first extended entries in access control lists to allow rights to apply to 
just a portion of an object. The second extension allows centralized management of object 
hierarchies by specifying more precisely how access control lis ... 

Keywords: Windows 2000, access control lists 
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v May 2001 ACM Transactions on Information and System Security (TISSEC), volume 4 

Issue 2 
Publisher: ACM Press 

r- ii * , 01 , MC « . n i/n\ Additional Information: full citation , abstract , references , index terms . 

Full text available: TO pdf(462.10 KB) — ; 

^ review 

The Secure Virtual Enclaves (SVE) collaboration infrastructure allows multiple 
organizations to share their distributed application objects, while respecting organizational 
autonomy over local resources. The infrastructure is transparent to applications, which 
may be accessed via a web server, or may be based on Java or Microsoft's DCOM. The 
SVE infrastructure is implemented in middleware, with no modifications to COTS operating 
systems or network protocols. The system enables dynamic updates to ... 

Keywords: Access control, coalition, collaborative system, group communication, 
middleware, security policy 



5 Fast detection of communication patterns in distributed executions 
Thomas Kunz, Michiel F. H. Seuren 

November 1997 Proceedings of the 1997 conference of the Centre for Advanced 
Studies on Collaborative research 

Publisher: IBM Press 

Full text available: ^ pdf(4.21 MB) Additional Information: full citation , abstract , references , index terms 

Understanding distributed applications is a tedious and difficult task. Visualizations based 
on process-time diagrams are often used to obtain a better understanding of the 
execution of the application. The visualization tool we use is Poet, an event tracer 
developed at the University of Waterloo. However, these diagrams are often very complex 
and do not provide the user with the desired overview of the application. In our 
experience, such tools display repeated occurrences of non-trivial commun ... 

6 Stateful distributed interposition 
John Reumann, Kang G. Shin 

February 2004 ACM Transactions on Computer Systems (TOCS), volume 22 issue 1 
Publisher: ACM Press 

Full text available: Q pdf(833.84 KB) Additional Information: full citation , abstract , references , index terms 
Interposition-based system enhancements for multitiered servers are difficult to build 
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because important system context is typically lost at application and machine boundaries. 
For example, resource quotas and user identities do not propagate easily between 
cooperating services that execute on different hosts or that communicate with each other 
via intermediary services. Application-transparent system enhancement is difficult to 
achieve when such context information is obscured by complex servic ... 

Keywords: Distributed computing, component services, distributed context, multitiered 
services, operating systems, server consolidation 



The KaffeOS Java runtime system 
Godmar Back, Wilson C. Hsieh 

July 2005 ACM Transactions on Programming Languages and Systems (TOPLAS), 

Volume 27 Issue 4 
Publisher: ACM Press 

Full text available: ^| pdf (704.30 KB) Additional Information: full citation , abstract , references , index terms 

Single-language runtime systems, in the form of Java virtual machines, are widely 
deployed platforms for executing untrusted mobile code. These runtimes provide some of 
the features that operating systems provide: interapplication memory protection and 
basic system services. They do not, however, provide the ability to isolate applications 
from each other. Neither do they provide the ability to limit the resource consumption of 
applications. Consequently, the performance of current systems degra ... 

Keywords: Robustness, garbage collection, isolation, language runtimes, resource 
management, termination, virtual machines 



8 Security issues surrounding programming languages for mobile code: JAVA vs. Safe- 1 
Ale! 

^ Stefanos Gritzalis, George Aggelis 

April 1998 ACM SIGOPS Operating Systems Review, volume 32 issue 2 

Publisher: ACM Press 

Full text available: ^| pdf(1.42 MB) Additional Information: full citation , abstract , references 

JAVA is claimed to be a system programming language having a number of advantages 
over traditional programming languages. These advantages stem from the fact that it is a 
platform - independent language, thus promising truly network oriented computing as 
long as a nearly universal system for distributing applications. On the other hand, 
although being an interpreted, much simpler, scripting language, Safe-Tel was proposed 
as an executable contents type of MIME and thus as the standard language f ... 

9 Scheduling and resource allocation: SHARP: an architecture for secure resource | 
<g> peering 

^ Yun Fu, Jeffrey Chase, Brent Chun, Stephen Schwab, Amin Vahdat 

October 2003 Proceedings of the nineteenth ACM symposium on Operating systems 

principles 
Publisher: ACM Press 

Full text available: fiQ pdf(339.51 KB ) Additional Information: full citation , abstract, references , dtings, index 
" terms 

This paper presents Sharp, a framework for secure distributed resource management in 
an Internet-scale computing infrastructure. The cornerstone of Sharp is a construct to 
represent cryptographically protected resource <it>claims</it> — promises or rights to 
control resources for designated time intervals— together with secure mechanisms to 
subdivide and delegate claims across a network of resource managers. These mechanisms 
enable flexible <it>resource peeri ... 
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We review the existing literature on Java safety, emphasizing formal approaches, and the 
impact of Java safety on small footprint devices such as smartcards. The conclusion is 
that although a lot of good work has been done, a more concerted effort is needed to 
build a coherent set of machine-readable formal models of the whole of Java and its 
implementation. This is a formidable task but we believe it is essential to build trust in 
Java safety, and thence to achieve ITSEC level 6 or Common Crite ... 
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Distributed computer architectures labeled "peer-to-peer" are designed for the sharing of 
computer resources (content, storage, CPU cycles) by direct exchange, rather than 
requiring the intermediation or support of a centralized server or authority. Peer-to-peer 
architectures are characterized by their ability to adapt to failures and accommodate 
transient populations of nodes while maintaining acceptable connectivity and 
performance. Content distribution is an important peer-to-peer application ... 
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We present some issues relevant to the design of a secure platform for distributed mobile 
computing, that goes beyond existing ad-hoc approaches to software mobility. This 
platform aims to support wide-area computing applications such as active network 
infrastructures or network supervision tools. Our contribution is two-fold: the first part of 
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the paper is a survey of the security features of a few languages and virtual machines as 
regards authentication, access control, and communications secu ... 
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Authorization policy infrastructures are evolving with the complex environments that they 
support. However, the requirements and technologies supporting context are not yet well 
understood. Often implemented as condition functions or predefined attributes, context is 
used to more precisely control when and how policy is enforced. This paper considers 
context requirements and services in authorization policy. The properties and security 
requirements of context evaluation are classified. A key obs ... 
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Process migration is the act of transferring a process between two machines. It enables 
dynamic load distribution, fault resilience, eased system administration, and data access 
locality. Despite these goals and ongoing research efforts, migration has not achieved 
widespread use. With the increasing deployment of distributed systems in general, and 
distributed operating systems in particular, process migration is again receiving more 
attention in both research and product development. As hi ... 
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Asbestos, a new prototype operating system, provides novel labeling and isolation 
mechanisms that help contain the effects of exploitable software flaws. Applications can 
express a wide range of policies with Asbestos's kernel-enforced label mechanism, 
including controls on inter-process communication and system-wide information flow. A 
new event process abstraction provides lightweight, isolated contexts within a single 
process, allowing the same process to act on behalf of multiple users while ... 
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terms 

Java 2 has a security architecture that protects systems from unauthorized access by 
mobile or statically configured code. The problem is in manually determining the set of 
security access rights required to execute a library or application. The commonly used 
strategy is to execute the code, note authorization failures, allocate additional access 
rights, and test again. This process iterates until the code successfully runs for the test 
cases in hand. Test cases usually do not cover all paths th ... 
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We propose "secret-protected (SP)" architecture to enable secure and convenient 
protection of critical secrets for a given user in an on-line environment. Keys are 
examples of critical secrets, and key protection and management is a fundamental 
problem i often assumed but not solved L underlying the use of cryptographic protection 
of sensitive files, messages, data and programs. SP-processors contain a minimalist set of 
architectural features that can be built into a general-purpose microprocess ... 
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